Privacy Policy
Effective Date: April 1, 2026
Last Updated: August 13, 2026
1. Introduction
Welcome to LandWise ("we," "our," or "us"). We are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website landwise.earth (including our 3D Explorer at 3d.landwise.earth) and use our services.
LandWise operates from Ko Pha Ngan, Surat Thani, Thailand, and is the data controller for the personal data described here. We process personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). Where you are located in the European Economic Area or the United Kingdom, we also honour the rights described in section 9.
By using our website, you agree to the collection and use of information in accordance with this policy. Where we rely on your consent, you can withdraw it at any time, as described in sections 9 and 10.
2. Information We Collect
2.1 Information You Give Us
- Contact Information: name, email address, phone number.
- Property Information: land location, coordinates, plot details, and the map link or place name you give us so we can find the site.
- Documents You Upload: if you attach a Chanote (title deed) or similar document to an order, we receive that document and whatever it contains, which typically includes the registered owner's name and the plot identifiers. These are stored in a private bucket and are never made public. See section 7.
- Order and Booking Details: the package you chose, any notes you add, whether you asked us to keep your project confidential, and your acceptance of our Terms.
- Pilot Applications: if you apply to fly with us, we collect your name, email, phone, operating area, drone equipment, experience, portfolio links, and any CAAT registration or certification details you provide.
- Agency and Network Applications: if you apply to the LandWise Network, we collect your agency name, contact name, email, phone, operating area, agency type, approximate portfolio size, website, and what you tell us you are looking for.
- Communication Data: messages, enquiries and feedback you send us, including messages you send through the chat widget on our site and through WhatsApp.
- Payment Information: payments are processed by Stripe. We never receive or store your full card number. We receive confirmation of the payment, the amount, and the billing details Stripe passes back to us.
2.2 Information Collected Automatically
- Usage Data: pages visited, time spent, clicks, and navigation patterns.
- Device Information: browser type, device type, and operating system, derived from your browser's user-agent string.
- Approximate Location: country and city, derived by our hosting provider from your IP address. We do not store your IP address in our analytics records. Your IP address is processed transiently by our hosting provider and by our systems for security, abuse prevention and rate limiting, and appears in server logs held for a limited period.
- Marketing Attribution: how you first reached us and how you most recently reached us, for example the search engine, advertisement or referral link, together with any campaign tags in the link you followed.
2.3 Cookies and Similar Technologies
We set the following first-party cookies on .landwise.earth. They are scoped to the whole domain so that opening a 3D model on 3d.landwise.earth is recognised as the same visit rather than a new one:
| Cookie | Purpose | Lifetime |
|---|---|---|
| lw_vid | A random visitor ID. It contains no name, email or IP address, and lets us count returning visitors without identifying you. | 2 years |
| lw_sid, lw_sla | A random session ID and its last-activity timestamp, so a visit is grouped as one session. | 30 minutes of inactivity |
| lw_ft, lw_lt | First-touch and last-touch marketing attribution: which channel or campaign brought you here. | 2 years |
| cookieConsent | Stored in your browser's local storage. Records your answer to the cookie banner so we do not ask again. | Until you clear it |
Analytics and advertising cookies are off until you accept them. If you accept, Google Analytics, Google Ads and the Meta Pixel set their own cookies, which they use to measure traffic, attribute conversions and support remarketing. If you decline, those tags are instructed not to store or use cookies for you, and we continue to record only the first-party measurement described above.
You can change your answer at any time. See section 10.
3. How We Use Your Information, and Our Lawful Basis
| Purpose | Lawful basis under the PDPA |
|---|---|
| Delivering the service you ordered: scheduling the flight, producing the analysis, sending you the result, and supporting you afterwards. | Performance of a contract with you, or steps taken at your request before entering one. |
| Responding to enquiries, quotes, and applications to the pilot network or the LandWise Network. | Steps taken at your request before entering a contract, and our legitimate interest in answering people who contact us. |
| Reviewing pilot applications, including certification details, before anyone flies for a paying client. | Steps taken at your request before entering a contract, and our legitimate interest in vetting operators. |
| Security, abuse prevention, and rate limiting. | Our legitimate interest in keeping the service available and our clients' documents private. |
| Measuring our own pages and understanding which of our channels work, using first-party data only. | Our legitimate interest in understanding how our own site is used. |
| Third-party analytics and advertising cookies, and remarketing. | Your consent, given through the cookie banner and withdrawable at any time. |
| Sending marketing emails or messages. | Your consent, withdrawable at any time using the unsubscribe link or by contacting us. |
| Keeping records of transactions, tax and accounting. | Compliance with a legal obligation. |
4. How We Share Your Information
We do not sell your personal information. We share it only as follows:
- Service Providers: the processors listed in section 5, who handle data on our instructions in order to run the site and deliver our services.
- Pilots and Contractors: where a flight is carried out by a pilot in our network, we share the site location and access details needed to fly it. We do not share your title deed with a pilot.
- Legal Requirements: where required by law, or to establish, exercise or defend legal claims.
- Business Transfers: in connection with a merger, sale or acquisition of our business.
5. Third-Party Services We Use
These providers process personal data on our behalf. Each has its own privacy policy, and we encourage you to review them.
| Provider | What it does for us |
|---|---|
| Vercel | Hosts the website and serves every page. Processes request data including your IP address, and provides the country and city we record. |
| Google Firebase / Firestore | Stores bookings, orders, jobs, and pilot and agency applications. |
| Stripe | Processes card payments and subscriptions. Stripe receives your payment details directly; we do not. |
| Cloudflare R2 | Private storage for documents you upload, including Chanote title deeds, and for report files. |
| Resend | Sends our transactional email, such as order confirmations and delivery notices. |
| Make.com | Powers the chat widget on our site. Messages you send in the chat are passed to Make.com to generate a reply and to reach us. |
| Google Analytics | Website analytics. Loaded only with your consent. |
| Google Ads | Advertising conversion measurement. Loaded only with your consent. |
| Meta (Facebook) Pixel | Advertising measurement and remarketing. Loaded only with your consent. |
| Google Maps | Map links and location lookup for a plot. |
| Google Workspace (Sheets and Calendar) | Enquiries are copied to a private spreadsheet, and confirmed flights to our operations calendar, so that a job is not lost between systems. These records carry your name, contact details and the plot location. |
| Cloudinary | Hosts and delivers images used in our portfolio. |
| Open-Meteo | Weather forecasting for flight scheduling. It receives the plot's coordinates only, with no name or contact details attached. |
| WhatsApp (Meta) | Customer communication, where you choose to message us there. |
We also run two systems on infrastructure we control: a private analytics store holding the first-party measurement described in section 2.3, and an internal CRM that records enquiries and completed orders so we can follow up with you. Neither is shared with any advertising network.
Where you are approved as a pilot in our network, your name and email are also passed to our operations and accounting backend in order to create your account.
6. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. In particular, documents you upload are stored in a private bucket that is not publicly readable, and are served only through short-lived signed links. Administrative access to orders, applications and client data requires authentication.
However, no internet transmission is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to result in a high risk to your rights and freedoms, we will notify you and the Personal Data Protection Committee as required by the PDPA.
7. Data Retention
- Order and client records: kept for as long as needed to deliver and support the work, and then for as long as we are required to keep transaction and tax records.
- Uploaded documents, including title deeds: kept for the life of the project and for the period we may need them to answer questions about the work delivered. You may ask us to delete a document you uploaded, and we will do so unless we are required to keep it.
- Pilot and agency applications: kept while the application is under review and, if unsuccessful, for a reasonable period afterwards in case a suitable opportunity arises. You may ask us to delete an application at any time.
- Analytics records: kept in aggregate for trend reporting. The first-party cookies that support them expire as set out in section 2.3.
- Enquiries and chat messages: kept for as long as needed to answer you and to keep a record of what was agreed.
Once your information is no longer needed for any of these purposes, we securely delete or anonymize it.
8. International Data Transfers
We are based in Thailand, but most of the providers listed in section 5 operate outside Thailand, principally in the United States and the European Union. Using our website therefore involves transferring your personal data abroad.
Where we transfer personal data outside Thailand, we do so on one of the bases permitted by the PDPA: because the transfer is necessary to perform a contract with you or to take steps at your request, because you have consented after being informed of the possible risks, or under the contractual protections our providers offer, which for our principal providers include the European Commission's Standard Contractual Clauses.
9. Your Rights
Under the PDPA, and where applicable under the GDPR, you have the right to:
- Access: request a copy of the personal data we hold about you, and information about how we use it.
- Correction: have inaccurate or incomplete data corrected.
- Deletion: ask us to delete your personal data where we no longer have grounds to keep it.
- Restriction: ask us to suspend our use of your data while a question about it is resolved.
- Objection: object to processing we carry out on the basis of legitimate interest, and to direct marketing at any time.
- Data Portability: receive data you gave us in a commonly used electronic form, or have it sent to another controller.
- Withdraw Consent: withdraw consent at any time, including your cookie choice, without affecting anything done before you withdrew it.
- Complain: lodge a complaint with Thailand's Personal Data Protection Committee (PDPC), or with your local supervisory authority if you are in the EEA or the UK.
To exercise any of these rights, contact us at shaun@landwise.earth. We will respond within 30 days. We may need to verify your identity before acting on a request, so that we do not disclose your data to someone else.
10. Managing Cookies
Analytics and advertising cookies are denied by default. They are enabled only if you choose Accept on the cookie banner, and choosing Decline instructs Google and Meta not to use cookies or advertising identifiers for you.
To change your answer at any time: , here or in the footer of our website. Your new choice takes effect immediately.
You can also block or delete cookies in your browser settings. Note that disabling cookies may affect website functionality.
To opt out of Google Analytics everywhere: Google Analytics Opt-out
11. Children's Privacy
Our services are directed to adults and are not intended for children. We do not knowingly collect personal information from a child. Under Thai law, a person under 20 years of age is a minor, and where consent is the basis for processing we may require the consent of a parent or guardian. If you believe we have collected information from a child, please contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Last Updated" date above. Where a change materially affects how we use your data, we will take reasonable steps to tell you directly. We encourage you to review this policy periodically.
13. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise any of the rights in section 9, please contact us. LandWise is the data controller for the personal data described in this policy.